id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc	launchpad_bug
123	"""text/plain"" link uses double filename= query arg"	warner	warner	"the web server provides a ""text/plain"" link on each file, to serve the data with the Content-Type forced to be text/plain . This is a convenience feature, to let users view a file which they know is just plain text, but which an overzealous server or browser thinks is something exotic: usually this impacts files with extensions like .py and .diff .

This feature is implemented by providing the usual href plus a ""?filename=foo.txt"", to force the content-type-choosing mechanism to use text/plain.

However, with the recent XSS/XSRF defenses, this link winds up with a double ?filename= queryarg. This probably still works, but it isn't valid HTML (two '?' characters in one URL), and is weird (two copies of the same argument).

This needs to be changed so that any existing filename= argument is __replaced__. There is probably a clever URLPath-based URL manipulation class available to do this sort of thing, particularly in Nevow.
"	defect	closed	major	eventually	code-frontend-web	0.6.1	fixed